Lab 10: publish QuickNotes to GHCR and prepare HF Space deployment

[smairon]

Goal

Complete Lab 10 for QuickNotes: publish the app to ghcr.io via a tag-triggered GitHub Actions workflow, prepare a Hugging Face Docker Space deployment, and document the real results in submissions/lab10.md.

Changes

• Task 1:
  Add .github/workflows/release.yml for tag-triggered release builds that push ghcr.io/smairon/devops-intro/quicknotes with both the immutable version tag and latest.
• Task 1:
  Pin all third-party GitHub Actions by full SHA, derive a lowercase GHCR image path, and publish a multi-arch image for linux/amd64 and linux/arm64.
• Task 1:
  Document the real published v0.1.1 image, the successful clean pull, the manifest platforms, and the successful GitHub Actions run in submissions/lab10.md.
• Task 2:
  Add cloud/hf-space/Dockerfile, cloud/hf-space/README.md, and cloud/hf-space/DEPLOY.md for a Docker SDK Hugging Face Space that pulls ghcr.io/smairon/devops-intro/quicknotes:v0.1.1 and exposes port 8080.
• Task 2:
  Document the actual attempted Hugging Face deployment, including the failed git push, unchanged Space remote, public 503 response, and the uncollected latency measurements, in submissions/lab10.md.

Testing

• docker buildx imagetools inspect ghcr.io/smairon/devops-intro/quicknotes:v0.1.1
• docker pull ghcr.io/smairon/devops-intro/quicknotes:v0.1.1
• docker pull ghcr.io/smairon/devops-intro/quicknotes:latest
• Verify release tags on origin with git ls-remote --tags origin
• Verify the Hugging Face Space remote head with git ls-remote https://huggingface.co/spaces/Axxilius/quicknotes refs/heads/main
• Probe the current public Space health endpoint with curl -v https://axxilius-quicknotes.hf.space/health

Checklist

• Title is a clear sentence (≤ 70 chars)
• Commits are signed (git log --show-signature)
• submissions/labN.md updated